Security Tools
CSP Header Generator
Choose directives and allowed sources to build a Content-Security-Policy header for your site.
How to use this tool
- 1Enable the directives you need (script-src, style-src, etc).
- 2Add allowed sources for each.
- 3Copy the generated CSP header value.
Frequently asked questions
Where do I put this header?+
Set it as a Content-Security-Policy HTTP response header from your server or CDN, or as a <meta> tag as a fallback.